Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

(v6) Update old proxy version #5709

Merged
merged 5 commits into from
Feb 25, 2021
Merged

(v6) Update old proxy version #5709

merged 5 commits into from
Feb 25, 2021

Conversation

r0mant
Copy link
Collaborator

@r0mant r0mant commented Feb 25, 2021

Update the isOldCluster logic to check remote proxies of version less than 6.0. Otherwise, after upgrading the root cluster it tries to set up the remote cluster cache to watch for the new database servers resource which produces the following error on the leaf:

two-auth     | INFO [RBAC]      Access to read db_server in namespace default denied to roles RemoteProxy,default-implicit-role: no allow rule matched. services/role.go:2083

With this fix, the error no longer shows, I see this on the root side which seems normal?

DEBU [RBAC]      Check access to role(Proxy) rc(leaf, labels=map[]) matchLabels=true, msg=matched, err=<nil> allow=map[*:[*]] rcLabels=map[] services/role.go:1305

#5721 backport.

@r0mant r0mant added this to the 6.0 "San Diego" milestone Feb 25, 2021
@r0mant r0mant self-assigned this Feb 25, 2021
@r0mant r0mant mentioned this pull request Feb 25, 2021
@r0mant r0mant added the test-plan-problem Issues which have been surfaced by running the manual release test plan label Feb 25, 2021
@r0mant r0mant mentioned this pull request Feb 25, 2021
lib/reversetunnel/srv.go Outdated Show resolved Hide resolved
lib/reversetunnel/srv.go Outdated Show resolved Hide resolved
lib/reversetunnel/srv.go Outdated Show resolved Hide resolved
lib/reversetunnel/srv.go Outdated Show resolved Hide resolved
@r0mant r0mant merged commit df0468a into branch/v6 Feb 25, 2021
@r0mant r0mant deleted the roman/v6/oldproxy branch February 25, 2021 22:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
test-plan-problem Issues which have been surfaced by running the manual release test plan
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants